CVE-2023-36539

Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:zoom:video_software_development_kit:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:android:*:*
cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:iphone_os:*:*
cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:macos:*:*
cpe:2.3:a:zoom:meetings:5.15.1:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:iphone_os:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:android:*:*
cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:ipad_os:*:*
cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:macos:*:*
cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:zoom:5.15.1:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:linux:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:macos:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:zoom:poly_ccx_700_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:h:zoom:poly_ccx_700:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:zoom:poly_ccx_600_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:h:zoom:poly_ccx_600:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:zoom:yealink_vp59_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:h:zoom:yealink_vp59:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:zoom:yealink_mp54_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:h:zoom:yealink_mp54:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:zoom:yealink_mp56_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:h:zoom:yealink_mp56:-:*:*:*:*:*:*:*

History

18 Sep 2024, 19:15

Type Values Removed Values Added
Summary Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information. Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.

10 Jul 2023, 13:29

Type Values Removed Values Added
CPE cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:android:*:*
cpe:2.3:a:zoom:zoom:5.15.1:*:*:*:*:windows:*:*
cpe:2.3:o:zoom:poly_ccx_600_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:a:zoom:video_software_development_kit:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:macos:*:*
cpe:2.3:h:zoom:poly_ccx_600:-:*:*:*:*:*:*:*
cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:meetings:5.15.1:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:macos:*:*
cpe:2.3:o:zoom:yealink_mp56_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:android:*:*
cpe:2.3:o:zoom:yealink_mp54_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:h:zoom:yealink_mp54:-:*:*:*:*:*:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:linux:*:*
cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:macos:*:*
cpe:2.3:h:zoom:yealink_mp56:-:*:*:*:*:*:*:*
cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:ipad_os:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:windows:*:*
cpe:2.3:o:zoom:yealink_vp59_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:iphone_os:*:*
cpe:2.3:o:zoom:poly_ccx_700_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:h:zoom:yealink_vp59:-:*:*:*:*:*:*:*
cpe:2.3:h:zoom:poly_ccx_700:-:*:*:*:*:*:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:iphone_os:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
CWE CWE-326
References (MISC) https://explore.zoom.us/en/trust/security/security-bulletin/ - (MISC) https://explore.zoom.us/en/trust/security/security-bulletin/ - Vendor Advisory
First Time Zoom yealink Mp54 Firmware
Zoom zoom
Zoom poly Ccx 600 Firmware
Zoom meetings
Zoom video Software Development Kit
Zoom yealink Mp54
Zoom poly Ccx 600
Zoom rooms
Zoom poly Ccx 700
Zoom yealink Mp56 Firmware
Zoom yealink Vp59
Zoom poly Ccx 700 Firmware
Zoom
Zoom yealink Mp56
Zoom yealink Vp59 Firmware

30 Jun 2023, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-06-30 03:15

Updated : 2024-09-18 19:15


NVD link : CVE-2023-36539

Mitre link : CVE-2023-36539


JSON object : View

Products Affected

zoom

  • poly_ccx_700
  • video_software_development_kit
  • zoom
  • poly_ccx_600
  • yealink_mp54_firmware
  • poly_ccx_600_firmware
  • meetings
  • poly_ccx_700_firmware
  • yealink_vp59
  • yealink_mp56_firmware
  • rooms
  • yealink_mp56
  • yealink_vp59_firmware
  • yealink_mp54
CWE
CWE-326

Inadequate Encryption Strength